icinga-web: http-basic auth / ldap and "root" User

[Denny Schierz]

hi,

I've installed the latest icinga-web and it works. Now i want to
authenticate against ldap with http-basic. It works too, but now, I
can't login as "root", cause the "root" user doesn't exist in LDAP.

So, how can I manage this problem, to have regular LDAP accounts, but
the local icinga-web "root" account is also available?

Ah, i used the Basic-auth via Apache, 'cause it was easier for me, than
the XML things ... ;-) :

================
AuthType Basic
AuthName "Icinga Monitoring"
AuthBasicProvider ldap
AuthLDAPURL "ldap://ldap2.domain.foo
ldap.domain.foo/cn=accounts,dc=domain,dc=foo?uid?sub?(objectClass=*)"
AuthLDAPGroupAttribute member
AuthLDAPGroupAttributeIsDN On
AuthzLDAPAuthoritative Off

# Define allowed LDAP users
Require ldap-group cn=fb,cn=admins,cn=groups,dc=domain,dc=foo
=================


any suggestions?

cu denny

[Marius Hein]

Hi.

Post by Denny Schierz
I've installed the latest icinga-web and it works. Now i want to
authenticate against ldap with http-basic. It works too, but now, I
can't login as "root", cause the "root" user doesn't exist in LDAP.
So, how can I manage this problem, to have regular LDAP accounts, but
the local icinga-web "root" account is also available?
Ah, i used the Basic-auth via Apache, 'cause it was easier for me, than

Using native LDAP authentication is the easiest way to provide mixed
authentication in your system.

If you have configured ldap (with the XML things) you can simply switch
to the internal provider for users not in your ldap.

Kind regards,
Marius.

Marius Hein
Senior Application Developer

NETWAYS GmbH | Deutschherrnstr. 15-19 | D-90429 Nürnberg
Tel: [phone] | Fax: [phone]
GF: Julian Hein | AG Nürnberg HRB18461

http://www.netways.de | ***@netways.de

** NETWAYS Open Source Data Center Conference 2011 | Nürnberg, 06. und
07. April 2011 | http://www.netways.de/osdc **